Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer
File: m9bIYDQsx5nCgHT2mXaKjsvapS4.cer (raw, json)
Hash identifier: lkZ76QT4extSoWLLffLFfbZr/7DylHV6BVpjdmf+1Ms=
Subject key identifier: 9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EC2C0981E97D641FA1DFF9196CAF5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 56642
IP: 92.118.152.0/22
IP: 185.155.248.0/22
IP: 2a09:ae40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:c2:c0:98:1e:97:d6:41:fa:1d:ff:91:96:ca:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bd6c860342cc799c28074f699768a8ecbdaa52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:87:e5:2f:0d:a3:cf:84:ac:db:fe:53:c1:
a3:7d:22:52:49:fd:80:1e:7a:8d:26:78:28:4a:0f:
7c:de:ce:20:84:51:c0:cb:24:85:23:cc:b3:c9:c4:
5a:33:6a:f2:b4:38:d6:e2:63:f6:92:25:91:a7:d6:
1e:e1:75:d4:e0:5d:67:0a:e2:e0:d8:bf:e4:be:3b:
2b:de:a1:1a:13:ff:11:8f:04:c1:55:64:f2:1c:e1:
43:48:25:a9:87:1e:c8:78:71:b2:51:b1:88:18:5c:
22:32:14:d6:53:ca:90:94:fc:3a:f5:94:75:7b:3c:
63:2a:9b:82:ba:91:c8:29:e6:71:17:9c:d8:17:5a:
8b:fd:4d:d5:39:38:36:57:bd:d3:31:57:e0:f2:24:
6c:23:4c:2b:9c:ec:35:ec:41:29:18:0e:5f:f6:7c:
62:c3:8f:f6:91:5e:e4:9c:87:a9:ac:6a:b5:f2:cb:
11:8c:c6:9e:0f:5e:1a:99:63:bb:b6:41:25:57:c0:
db:66:52:4e:81:24:36:88:57:a3:5e:6d:d8:13:ea:
4d:15:d5:eb:c4:64:28:bf:ae:0d:01:a6:53:a8:b1:
9d:6c:ad:24:3c:8f:1e:d9:0f:1b:56:82:22:33:ed:
92:9f:14:04:53:e1:37:ce:4c:7b:f3:b6:08:ea:af:
38:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.152.0/22
185.155.248.0/22
IPv6:
2a09:ae40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56642
Signature Algorithm: sha256WithRSAEncryption
1b:1f:45:24:37:e9:33:f5:a0:26:3f:7d:0c:a6:25:aa:90:e1:
9f:8a:3f:93:04:0e:1d:f9:b9:08:3c:84:f5:35:3e:33:75:8c:
45:58:db:b7:df:93:a6:d4:f2:9e:f8:24:7a:0e:88:b8:70:04:
70:2c:66:8b:d6:6f:0f:93:1f:c2:95:36:f5:cf:0b:70:e1:88:
27:98:07:5f:6e:f4:a3:b9:f8:9e:64:e5:fa:2f:9c:46:d1:bb:
48:2e:fb:13:fd:7f:f8:cc:71:ca:71:24:96:23:5a:b3:7f:22:
dc:86:e1:ba:f2:f9:04:09:cf:78:22:f9:9b:24:63:8c:1a:e2:
99:ea:bb:00:c8:cc:de:ed:be:5a:b3:54:c4:1f:15:4e:71:42:
ee:4d:1f:52:8f:4a:62:17:ea:71:85:d9:d7:55:6d:15:0b:0b:
38:dd:39:c2:08:f6:1c:a2:f4:35:b3:4c:cd:fc:14:6e:8d:ac:
9b:15:aa:fb:8d:2e:fc:39:53:59:62:4a:fa:23:2b:54:dd:c2:
b1:ea:a4:d2:de:5d:cf:b8:eb:42:0a:bd:96:31:41:7d:43:c2:
5d:09:f4:3b:74:6d:66:22:9a:f2:ff:0c:af:26:87:e1:db:32:
b1:03:aa:1a:ea:a1:0c:36:75:f0:a1:1f:ae:d7:34:8b:f3:ce:
b3:0d:be:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:58:37 2024 by rpki-client on console-fra.rpki-client.org